Lexicon Garden

dev.cocore.compute.verifyReceipt

Verify an indexed receipt offline-equivalently: structural checks against its job + attestation, a P-256 ECDSA signature check of `enclaveSignature` against the attestation public key, lexicon-schema validation, and — when an MDA cert chain is present — a hardware-attestation check bound to the signing key. `trustLevel` rises to `hardware-attested` only when a valid Apple chain certifies the receipt-signing key.

Repository @cocore.dev did:plc:5quuhkmwe2q4k3azfsgg7kdz namespace authority
Details · query
Kindquery
Authoritycompute.cocore.dev
Indexed
Compare Edit in builder → Fork →
cid bafyreidrw535h4xfkzi3gpkf4xnnbewmoy7oqy5wujkgogyed2plxstjja

Checks

Valid
  • unlimited-string defs.main.output.schema.properties.trustLevelNo maxLength, maxGraphemes or format limits this string.
JSONDownload
{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Verify an indexed receipt offline-equivalently: structural checks against its job + attestation, a P-256 ECDSA signature check of `enclaveSignature` against the attestation public key, lexicon-schema validation, and — when an MDA cert chain is present — a hardware-attestation check bound to the signing key. `trustLevel` rises to `hardware-attested` only when a valid Apple chain certifies the receipt-signing key.",
      "errors": [
        {
          "description": "The `uri` parameter is missing.",
          "name": "InvalidRequest"
        },
        {
          "description": "The receipt, or its referenced job/attestation, is not indexed.",
          "name": "NotFound"
        }
      ],
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "findings": {
              "items": {
                "ref": "dev.cocore.defs#verifyFinding",
                "type": "ref"
              },
              "type": "array"
            },
            "ok": {
              "type": "boolean"
            },
            "trustLevel": {
              "enum": [
                "self-attested",
                "hardware-attested"
              ],
              "type": "string"
            }
          },
          "required": [
            "ok",
            "trustLevel",
            "findings"
          ],
          "type": "object"
        }
      },
      "parameters": {
        "properties": {
          "uri": {
            "description": "The receipt record URI to verify.",
            "format": "at-uri",
            "type": "string"
          }
        },
        "required": [
          "uri"
        ],
        "type": "params"
      },
      "type": "query"
    }
  },
  "id": "dev.cocore.compute.verifyReceipt",
  "lexicon": 1
}